|
|
|
|
|
|
by daeken
4741 days ago
|
|
|
Before or after they have access to the private key, so long as an active MITM is not performed. In essence, PFS makes it such that no matter what information you have about the server's configuration, passive sniffing of data is not enough to compromise a connection's confidentiality. |
|
|